CIS NGINX Benchmark v2.1.0 L2 Webserver

This audit file has been deprecated and will be removed in a future update.

Name: CIS NGINX Benchmark v2.1.0 L2 Webserver

Updated: 3/23/2026

Authority: CIS

Plugin: Unix

Revision: 1.1

Estimated Item Count: 17

Filename: CIS_NGINX_v2.1.0_Level_2_Webserver.audit

Size: 28.1 kB

MD5: 31801038df85e9682fa2b03c10fb8d01

SHA256: 1ceb8cd45014579e38f6b98d8f6228b7d69c49ba6f58899e78b380c56096b0a7

Description	Categories
1.1.2 Ensure NGINX is installed from source
2.1.1 Ensure only required modules are installed
2.1.2 Ensure HTTP WebDAV module is not installed
2.1.3 Ensure modules with gzip functionality are disabled
2.5.3 Ensure hidden file serving is disabled
3.5 Ensure error logs are sent to a remote syslog server
3.6 Ensure access logs are sent to a remote syslog server
4.1.11 Ensure your domain is preloaded
4.1.12 Ensure session resumption is disabled to enable perfect forward security
4.1.13 Ensure HTTP/2.0 is used
4.1.14 Ensure only Perfect Forward Secrecy Ciphers are Leveraged
5.1.1 Ensure allow and deny filters limit access to specific IP addresses
5.2.4 Ensure the number of connections per IP address is limited
5.2.5 Ensure rate limits by IP address are set
5.3.3 Ensure that Content Security Policy (CSP) is enabled and configured properly
5.3.4 Ensure the Referrer Policy is enabled and configured properly
CIS_NGINX_v2.1.0_Level_2_Webserver.audit from CIS NGINX Benchmark v2.1.0